Re: [Sdn] new draft on SDN for DDoS mitigation

[Ali Haider <[e-mail]>]

This was an interesting read.

​It may be out of context for the filtering system (or it may not be)
however, some kind of a weighted mechanism can be implemented in order to
reduce the effect of temporary fluctuations or changes in the traffic.
Since these changes do not last long, they must be ignored and filtering
rules should not be installed for these.​ Otherwise, rules will be
installed only to be removed moments later.

Just a thought.


On Wed, Aug 12, 2015 at 6:16 PM, Wesley Eddy <[e-mail]> wrote:

> Hello, we wanted to make people aware of a new I-D that uses SDN (or
> more specifically OpenFlow) as a tool to improve DDoS mitigation:
>
> https://datatracker.ietf.org/doc/draft-eddy-sdnrg-customer-filters/
>
> The interesting part of this for SDNRG is probably the sub-controller
> concept, which is how we allow OpenFlow to be used inter-domain (for
> customers to control aspects of their ISP's network), and the three-
> stage organization of flow tables.
>
> The content is fairly specific to DDoS, but could be extended and
> generalized for other uses.
>
> Much of the other interdomain SDN work has the ISPs setting up virtual
> networks for each customer, or slice-based constructions, which are not
> required by this sub-controller approach.  It may be of interest as
> an alternative construction with its own set of advantages and
> disadvantages in comparison to other interdomain SDN approaches.
>
> We're eager to hear your comments, criticisms, and questions.
>
> --
> Wes Eddy
> MTI Systems
>
> _______________________________________________
> sdn mailing list
> [e-mail]
> https://mail.ietf.org/mailman/listinfo/sdn
>



-- 
*​Syed Ali Haider*, Ph.D
​Assistant Professor
School of Electrical Engineering and Computer Science
National University of Sciences ​and​ Technology
Sector H-12, Islamabad, Pakistan
​t: [phone]
​e: [e-mail]​
- - - - - - - - - - - - - - - - - - - - -